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Top Stories 

• Researchers identified a spam campaign dubbed “Wolf of Wall Street” that uses botnets to 
send out emails encouraging penny stock investors to purchase stocks of Canada-based 
Confederation Minerals Ltd., which has resulted in the transaction volume of the company 
increasing to 1,620,000 shares from 10,000 shares within 3 days. - Softpedia (See item 3 ) 

• Three Texas schools and two Ohio schools were closed October 16 due to health concerns 
after a number of students and staff members traveled on an October 13 flight with a 
patient who tested positive for Ebola. - WFAA 8 Dallas; WKYC 3 Cleveland (See item 17 ) 

• Two sergeants and a suspect were injured in a shooting spree that stretched across three 
Snohomish County, Washington cities October 15 targeting police officers, patrol cars, and 
police stations. - KIRO 7 Seattle (See item 23 ) 

• A group of security and IT firms began a campaign to detect and remediate malware 
installations belonging to a cyberespionage campaign targeting governments, financial 
services institutions, and the education sector since 2010. - The Register (See item 26 ) 




Fast Jump Menu 



PRODUCTION INDUSTRIES 

• Energy 

• Chemical 

• Nuclear Readers. Materials, and Wasie 

• Critical Manufacturing 

• Defense Industrial Base 

• Dams 

SUSTENANCE and HEALTH 

• Food and Agriculture 

• Water and Wastewater Systems 

• Healthcare and Public Health 



SERVICE INDUSTRIES 

• Financial Services 

• Transportation Systems 

• Information Technology 

• Communications 

• Commercial Facilities 
FEDERAL and STATE 

• Government Facilities 

• Emergency Services 



- 1 



Energy Sector 



Nothing to report 
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Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

1. October 16, Los Angeles Times - (National) Chrysler recalls 747,000 Jeep and 
Durango vehicles. Chrysler announced two recalls for around 747,000 vehicles, with 
the first recall covering 434,581 model year 2011-2014 Chrysler 300, Dodge Charger, 
Challenger, Durango, and Jeep Grand Cherokee vehicles due to an alternator issue 
which could potentially cause a dangerous engine stall. The second recall includes 
313,326 model year 2011-2013 Jeep Wranglers due to a power mirrors wiring issue 
that could lead to a fire. 

Source: http://www.latimes.com/business/autos/la-fi-hv-chrvsler-recalls-ieep-durango- 
20141016-story.html 

2. October 16, U.S. Consumer Product Safety Commission - (National) American Honda 
recalls recreational off-highway vehicles due to fire hazard. American Honda 
initiated a recall for about 15,400 model year 2014 Honda Pioneer 700 off-highway 
recreational vehicles due to the potential for debris to accumulate on a skid plate and 
come in contact with the vehicles’ exhaust systems, posing a fire hazard. 

Source: http://www.cpsc.gov/en/Recalls/Recall-Alerts/2015/American-Honda-Recalls- 
Recreational-Off-Highway- Vehicles/ 
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Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 



3. October 16, Softpedia - (International) Botnets used in “Wolf of Wall Street” spam 
campaign. Researchers with Bitdefender identified a spam campaign dubbed “Wolf of 
Wall Street” that uses botnets to send out promotional emails encouraging penny stock 
investors to purchase stocks of Canada-based Confederation Minerals Ltd., which has 
resulted in the transaction volume of the company increasing to 1,620,000 shares from 
10,000 shares within 3 days. The spam campaign is the largest recorded in 2014 and the 
attackers behind it stand to profit by selling stocks after inflating the prices. 

Source: http://news.softpedia.com/news/Botnets-Used-In-Wolf-of-Wall-Street-Spam- 
Campaign-462308.shtml 

4. October 15, U.S. Attorney’s Office, District of New Jersey - (New Jersey) Middlesex, 
N.J., woman pleads guilty to conspiring to defraud the U.S. Treasury Department 
of nearly $1 million. A Middlesex, New Jersey woman pleaded guilty October 15 to 
conspiring with others to obtain and cash stolen income tax refund checks, defrauding 
the U.S. Department of the Treasury of approximately $940,000. A co-conspirator who 
worked as a head teller at a Perth Amboy bank previously pleaded guilty to her role in 
the fraud. 

Source: 

http://www.iustice.gov/usao/ni/Press/files/Yalerio,%20Rosemary%20Plea%20PR.html 
For additional stories, see items 26 and 32 
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Transportation Systems Sector 

5. October 15, KUSA 9 Denver - (Colorado) Small plane makes emergency landing at 
DIA. A small plane carrying three people made an emergency landing at Denver 
International Airport in Colorado October 15 after a tire blew shortly after takeoff 
causing damage to the hydraulic system. Crews sprayed foam on the Hawker HS25B 
aircraft as a precaution once it landed. 

Source: http://www.9news.com/storv/news/local/2014/10/15/landing-gear-issue- 
dia/173 19477/ 

6. October 15, San Francisco Chronicle - (California) Tanker truck spills toilet water 
in 1-280 San Jose crash. A six-vehicle crash involving a semi-truck carrying portable- 
toilet water closed southbound lanes of Interstate 280 in San Jose for 2 hours October 
15 when a compartment burst, spilling the blue water all over the roadway. 

Source: http://blog.sfgate.com/stew/2014/10/15/tanker-truck-spills-toilet-water-in-i- 
280-san-jose-crash/ 

7. October 15, KXTV 10 Sacramento - (California) FedEx plane makes emergency 
landing at Sac International Airport. A FedEx DC- 10 plane made an emergency 
landing at Sacramento International Airport in California October 15 after the pilot 
noticed a possible engine fire. The plane landed safely and the pilot used an on-board 
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fire extinguisher to put out the fire. 

Source: http://www.newsl0.net/storv/news/local/sacramento/2014/10/15/plane-makes- 
emergencv-landing-sacramento-airport/17333063/ 

8. October 13, CBS News; Associated Press - (California) San Francisco ferry accident 
leaves 10 injured. Ten passengers were injured and taken to an area hospital October 
12 when the Peralta ferry hit a piling and crashed as it backed out of a terminal at Pier 
41 in San Francisco. The ferry was temporarily taken out of service while authorities 
investigated. 

Source: http://www.cbsnews.com/news/san-francisco-ferry-accident-leaves-10-iniured/ 
For another story, see item 33 
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Food and Agriculture Sector 

9. October 16, Fort Myers News-Press - (Florida) 200 gallons of honey spill in North 
Fort Myers, road back open. A truck carrying honey spilled 200 gallons of the 
product on northbound U.S. 41 in Lee County after hitting a bump. 

Source: http://www.news-press.com/storv/news/local/north-fort-mvers/2014/10/16/bee- 
careful-honey-spill-causes-road-closure-in-north-fort-myers/l 7347389/ 

10. October 15, KEYC 12 Mankato - (Minnesota) Lyon County man rescued from grain 
bin. Crews extracted a Lyon County man from a grain bin on a farm in Marshall 
October 14 after the man became trapped near a sidewall of the bin that he was 
cleaning. 

Source: http://www.kevc.com/storv/26793651/lyon-countv-man-rescued-from-grain- 
bin 

11. October 15, WFOR 4 Miami/WBFS 33 Miami - (Florida) Ammonia leak at north 
Miami frozen foods warehouse. An ammonia leak at the Southeast Frozen Foods 
facility in Miami prompted an evacuation of the food distribution warehouse and 
sickened five employees, including four individuals who were transported to an area 
hospital. Firefighters were able to contain the leak from a refrigeration system about 2 
hours later. 

Source: http://miarm.cbslocal.com/2014/10/15/ammonia-leak-at-north-miarni-frozen- 
foods-warehouse/ 

12. October 15, Associated Press - (Iowa) DNR: Ammonia enters tributary in 
southwest Iowa. The Iowa Department of Natural Resources is investigating after an 
unknown amount of anhydrous ammonia was released from the United Farmers 
Mercantile Co-op in Villisca into a tributary of the West Nodaway River October 14- 
October 15. Officials detected elevated levels of ammonia throughout the tributary, and 
Co-op employees pumped the contaminated water from the tributary and an on-site pit. 
Source: http://www.omaha.com/news/iowa/dnr-amrnonia-enters-tributarv-in- 
southwest-iowa/article abe6cc82-54bl-lle4-85ae-001a4bcf6878.html 
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13. October 15, Chicago Tribune - (Illinois) Bartlett pasta factory standoff leads to 
charges against Naperville man. A Naperville man who barricaded himself inside the 
Rana Meal Solutions pasta factory in Bartlett October 2 was charged in a DuPage 
County court October 14 with allegedly causing more than $10,000 damage inside the 
facility and tampering with a security or fire system at the plant. 

Source: http://www.chicagotribune.com/suburbs/naperville-lisle/ct-pasta-factory- 
standoff-tl- 1026-20 1410 1 5-story.html 
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Water and Wastewater Systems Sector 

14. October 15, KNSD 39 San Diego - (California) Sewage contamination expands to La 
Jolla Cove. A 5,000 gallon sewage spill into the ocean October 14 prompted officials 
to extend a beach closure at the Children’s Pool to La Jolla Cove in San Diego October 
15 until further notice. 

Source: http://www.nbcsandiego.com/news/local/Sewage-Spill-Contaminates- 
Childrens-Pool-in-La- Jolla-279 188491 .html 



15. October 15, WITN 7 Washington - (North Carolina) Water quality swimming 
advisory issued for ocean-side site in Carteret County. An advisory against 
swimming was issued in Carteret County October 15 after North Carolina officials 
discovered high levels of bacteria in the water that exceeded the State and U.S. 
Environmental Protection Agency’s recreational water quality standards. The advisory 
affects access to the public beach at the end of Bogue Inlet Drive adjacent to ocean pier 
in Emerald Isle within 200 feet of posted notices. 

Source: http://www.witn.com/home/headlines/Water-quality-swimming-advisorv- 
issued-for-ocean-side-site-in-Carteret-County-279375342.html 

For additional stories, see items 12 and 34 
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Healthcare and Public Health Sector 

16. October 15, Health IT Security - (California; Colorado) UC Davis Health email 
breach exposes 1,326 patients’ data. The University of California Davis Health 
System notified 1,326 patients that their personal information may have been accessed 
after a provider’s email was compromised by an u nkn own source September 26, 
resulting in potential impermissible access to the email account. The Colorado 
Department of Health Care Policy and Financing notified 15,000 patients that the 
company inadvertently mailed postcards containing their protected health information 
as part of a Medicaid and Department of Human Services’ Office of Behavioral Health 
survey. 

Source: http://healthitsecuritv.com/2014/10/15/uc-davis-health-email-breach-exposes- 
1326-patients-data/ 
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Government Facilities Sector 

17. October 16, WFAA 8 Dallas; WKYC 3 Cleveland - (Ohio; Texas) Schools in Ohio, 
Texas close amid Ebola scare. Three Central Texas schools and two Ohio schools 
were closed October 16 as a precaution due to health concerns after a number of 
students and staff members traveled on an October 13 flight with a patient who tested 
positive for Ebola. The schools and buses are undergoing thorough disinfecting and 
cleaning while the students and staff were isolated for monitoring. 

Source: http://www.wtsp.com/story/news/health/2014/10/16/belton-students-class- 
canceled-ebola/17344401/ 

18. October 15, San Francisco Chronicle - (California) ‘Possibly armed’ person 
prompts lock-down of Fremont school. Irvington High School in Fremont was 
evacuated after reports of a suspicious and potentially dangerous individual on campus 
October 15. Three other nearby schools were placed on precautionary lock-down while 
police spent several hours investigating the incident. 

Source: http://www.sfgate.com/bayarea/article/Possiblv-armed-person-prompts-lock- 
down-of-5825 148 .php 

19. October 15, Morris County Daily Record - (New Jersey) Three children injured in 
Andover school bus accident. Three students and a driver were injured in an accident 
involving a First Student School Bus transporting Fong Pond Middle School and 
Florence M. Burd School of the Andover Regional District students, when a vehicle 
disregarded a red traffic signal and crashed into the school bus at an intersection in 
Andover Township October 15. 

Source: http://www.dailvrecord.com/story/news/local/morris-countv/2014/10/15/three- 
children-injured-andover-school-bus-accident/17324985/ 

20. October 15, WPR1 12 Providence - (Rhode Island) Woman to face civil violation 
following hazmat scare. Police took a suspect into custody after the U.S. Attorney’s 
Office in Providence was evacuated for 2 hours October 15 when the suspect sprinkled 
powder in the receptionist area of the office prompting a HAZMAT situation. 
Preliminary tests determined the substance was likely baby powder. 

Source: http://wpri.com/2014/10/15/hazmat-crews-responds-to-us-attomevs-office/ 

21. October 15, Associated Press - (Maryland) 5 students, driver hurt in Md. school bus 
crash. Five students and a bus driver were injured in an accident involving a school bus 
that rear-ended a Walkersville High School bus in Maryland October 14. 

Source: http://www.wtop.com/41/3722630/5-students-driver-hurt-in-Md-school-bus- 
crash 

22. October 15, W1TN 7 Washington - (North Carolina) Three students transported to 
hospital after Beaufort County bus accident. Three students were transported to an 
area hospital after an accident involving a P.S. Jones Middle School bus that was rear- 
ended in Beaufort County October 15. 
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Source: http://www.witn.com/home/headlines/School-bus-accident-in-Beaufort- 
County-has-iniuries-279333512.html 



For another story, see item 26 
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Emergency Services Sector 

23. October 16, KIRO 7 Seattle - (Washington) Snohomish County shooting spree 
targets police, two sergeants injured. Two sergeants and a suspect were injured in a 
shooting spree that stretched across three Snohomish County cities October 15 
targeting police officers, patrol cars, and police stations. The suspect and a sergeant 
from the Marysville Police Department exchanged gunfire before the suspect 
surrendered after shooting several rounds into patrol cars, the Granite Falls Police 
Station, and the Lake Stevens Police Department. 

Source: http://www.kirotv.com/news/news/snohomish-countv-shooting-spree-targets- 
police-inj/nhkLk/ 
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Information Technology Sector 

24. October 16, Securityweek - (International) Attackers abuse UPnP devices in DDoS 
attacks, Akamai warns. Researchers at Akamai Technologies reported that attackers 
have increasingly used the Simple Service Discovery Protocol (SSDP) that comes 
enabled on Universal Plug and Play (UPnP) devices to launch reflection and 
amplification distributed denial of service (DDoS) attacks starting in July. The 
researchers found that 4. 1 million Internet-facing devices could be used in this type of 
DDoS attack. 

Source: http://www.securitvweek.com/attackers-abuse-upnp-devices-ddos-attacks- 
akamai-wams 

25. October 16, Help Net Security - (International) New OpenSSL updates fix POODLE, 
DoS bugs. The OpenSSL Project released updates to OpenSSL that close four serious 
vulnerabilities, including the POODLE issue and two memory leak issues that could be 
used to launch denial of service (DoS) attacks against servers. 

Source: http://www.net-security.org/secworld.php?id= 17503 

26. October 15, The Register - (International) FireEye, Microsoft, Cisco team up to take 
down RAT-flinging crew. A group of security and IT firms led by Novetta began a 
coordinated campaign to detect and remediate malware installations belonging to a 
cyberespionage campaign targeting policy groups, governments, financial services 
institutions, the education sector, and think tanks since 2010. The cyberespionage group 
uses several tools including Moudoor, a derivative of the GhOst RAT remote access 
trojan, and the Hikiti malware used to control compromised systems. 

Source: 
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http://www.theregister.co.uk/2014/10/15/china cyberespionage takedown by microso 
ft cisco/ 



27. October 15, Threatpost - (International) Drupal fixes highly critical SQL injection 
flaw. Drupal issued a patch for its popular content management system (CMS) that 
closes a critical SQL injection vulnerability affecting version 7.x. The vulnerability 
could allow an unauthenticated user to perform arbitrary SQL execution and all users 
were advised to update their installations as soon as possible. 

Source: http://threatpost.com/drupal-fixes-highlv-critical-sql-iniection-flaw/108861 

For another story, see item 3 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

28. October 15, WJAC 6 Johnstown - (Pennsylvania) Power outage shuts down 911 
service in Elk County. A damaged fiber optic cable disrupted landline service for 
hundreds of customers in Elk County for several hours October 15 before crews were 
able to restore service. 

Source: http://www.wiactv.com/news/features/top-stories/stories/power-outage-shuts- 
down-91 l-service-elk-county-3965.shtml 
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Commercial Facilities Sector 

29. October 16, WISH 8 Indianapolis - (Indiana) 7 people rescued from south side 
apartment fire. An October 15 fire caused an estimated $500,000 in damage to the 
Winchester Village Apartments in Indianapolis and displaced 25 residents. Fire crews 
rescued seven individuals from the burning structure, including one resident who was 
transported to an area hospital with serious injuries. 

Source: http://wishtv.com/2014/10/16/crews-respond-to-working-apartment-fire/ 

30. October 16, U.S. Department of Labor - (Texas) OSHA cites Texas Dollar Tree 
Stores for putting employees at risk. The Occupational Safety and Health 
Administration (OSHA) cited Dollar Tree Stores Inc., for two willful and four repeat 
safety violations at the company’s Watauga store and fined the company $262,500. 
OSHA has cited Dollar Tree Stores for 234 safety and health violations at stores in 26 
States and issued more than $800,000 in fines since 2009. 
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Source: http://www.dol.gov/opa/media/press/osha/OSHA20141422.htm 



31. October 16, KXAS 5 Fort Worth - (Texas) Large fire at Dallas apartment complex. 
A 4-alarm fire at the Sylvan Thirty Lofts apartment complex under construction in 
Dallas broke out October 15 during welding work that was being performed inside the 
structure. At least 64 units were damaged by the fire and several other units in the 
structure sustained smoke damage. 

Source: http://www.nbcdfw.com/news/local/Large-Fire-At-Dallas-Apartment- 
Complex— 279319042.html 

32. October 15, Softpedia - (International) Cyberswim announces data breach lasting 
for more than three months. Cyberswim Inc., notified customers who made 
purchases on its Web site between May 12 and August 28 that their personal 
information, including payment card data, may have been compromised after officials 
confirmed that malicious software was installed on the company’s network, granting 
attackers access to the data. Cyberswim updated its Web site code and issued a 
password reset command to block the intruders’ access to the network. 

Source: http://news.softpedia.com/news/Cyberswim-Announces-Data-Breach-Lasting- 
For-More-Than-Three-Months-462237.shtml 
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Dams Sector 

33. October 15, Press of Atlantic City - (New Jersey) Dam repairs to cause detours on 
Weymouth Road in Vineland. A $7.2 million project to repair a dam and spillway at 
Willow Grove Lake on the border of Cumberland and Salem counties which were 
damaged during an August 2011 series of rain storms began October 15 with an 
estimated completion date of June 2015. A section of Weymouth Road that stretches 
across several counties will be closed during the project. 

Source: http://www.pressofatlanticcitv.com/news/breaking/dam-repairs-to-cause- 
detours -on- weymouth-ro ad-in- vineland/article 71389170-54ab-lle4-8fb9- 
ab5df01eafcl.html 



34. October 15, Associated Press; San Francisco Chronicle - (California) Tunnel below 
San Francisco Bay - part of $4.6B Hetch Hetchy water system upgrade - complete. 
Officials announced that the $288 million water tunnel project to replace a pair of pipes 
from the Hetch Hetchy Reservoir in Yosemite National Park was completed, allowing 
the flow of water which serves more than 2 million San Francisco Bay area customers. 
The tunnel is paid of an overall $4.6 billion project designed to improve the 
infrastructure of the reservoir’s aging pipelines, tunnels, and dams in case of an 
earthquake. 

Source: 

http://www.therepublic.com/view/storv/ef6398f4668e4b04862fbfla6d5c72d6/CA— 

Hetch-Hetchy-Overhaul 
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Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US -CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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